Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/B7GTc0aAmPEuk1zpKE5CIrBVTLY.roa
File: B7GTc0aAmPEuk1zpKE5CIrBVTLY.roa (raw, json)
Hash identifier: OSPCQMw4SGq8RUdPhjsL/BJXHXU/tBFLnf3M1zeg2Ww=
Subject key identifier: 07:B1:93:73:46:80:98:F1:2E:93:5C:E9:28:4E:42:22:B0:55:4C:B6
Certificate issuer: /CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Certificate serial: 01856FD4E4743F31BB80CBE9D6179B7B9318
Authority key identifier: 30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/B7GTc0aAmPEuk1zpKE5CIrBVTLY.roa
Signing time: Mon 02 Jan 2023 00:15:00 +0000
ROA not before: Mon 02 Jan 2023 00:15:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58128
IP address blocks: 185.155.205.0/24 maxlen: 24
185.155.204.0/24 maxlen: 24
185.155.206.0/24 maxlen: 24
2.57.226.0/24 maxlen: 24
2.57.225.0/24 maxlen: 24
2.57.224.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d4:e4:74:3f:31:bb:80:cb:e9:d6:17:9b:7b:93:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Validity
Not Before: Jan 2 00:15:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=07b19373468098f12e935ce9284e4222b0554cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:02:38:c7:29:3c:f9:cf:3c:d5:7f:65:3b:d8:
5c:f7:99:89:82:55:55:6a:49:35:7e:9e:2a:83:7d:
99:c8:2c:c4:30:7c:f6:20:15:be:bf:26:5e:70:bb:
43:57:d8:82:bc:60:ea:ac:01:b2:a0:a0:42:6b:93:
77:d5:f2:a0:92:e2:8a:58:d7:48:8c:32:9a:12:84:
01:bb:71:cf:27:da:e3:ed:37:57:37:e1:93:eb:25:
81:61:97:66:1a:0b:22:82:2a:b4:6f:f9:3c:fe:80:
25:9a:d0:54:0f:33:09:20:21:dc:a6:38:ae:5b:d8:
a4:7b:b4:75:5f:2b:48:41:67:c9:e6:ac:84:4f:a2:
b8:68:27:7a:d7:18:2f:0d:8b:64:ab:38:36:82:a4:
eb:e1:4d:56:c6:b9:e5:3c:76:0f:f8:f6:06:a7:2f:
f8:06:da:2a:f5:83:c3:b8:da:fb:23:48:9e:ab:7e:
b4:ac:17:08:16:41:a8:38:8a:62:f8:d8:85:70:19:
08:e8:ba:76:bf:40:64:5c:40:b8:da:14:85:14:31:
37:01:19:98:35:3e:06:72:cf:df:95:df:d9:a9:e0:
4a:72:a3:0e:e1:4d:0b:05:65:b9:81:88:bd:8d:90:
1b:a1:61:41:af:8c:58:55:71:d4:bd:40:e8:2b:54:
aa:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B1:93:73:46:80:98:F1:2E:93:5C:E9:28:4E:42:22:B0:55:4C:B6
X509v3 Authority Key Identifier:
keyid:30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/B7GTc0aAmPEuk1zpKE5CIrBVTLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.224.0-2.57.226.255
185.155.204.0-185.155.206.255
Signature Algorithm: sha256WithRSAEncryption
65:d3:36:63:0e:a0:29:e0:b4:c3:28:57:93:fa:0b:5c:b5:ce:
de:c7:ad:4a:90:87:f5:aa:f8:c5:c0:fb:b3:72:f6:a0:43:74:
d8:74:16:dd:e5:5b:66:08:f1:6f:4f:7d:28:7c:5f:1a:55:c2:
c4:f3:86:a9:ef:66:bd:ab:84:cc:c3:a7:9f:10:2a:d2:41:9c:
61:59:02:a6:ce:6d:03:72:b8:e4:a8:bd:d9:78:25:aa:16:f9:
63:66:f9:3f:95:72:29:8f:c6:ef:8e:13:f2:a9:91:55:19:a4:
4f:e3:c6:61:49:4c:fe:8f:47:0e:c8:77:00:ab:98:5b:94:21:
87:e7:b9:34:e5:e4:16:db:39:d4:d5:8d:90:89:bb:af:c6:01:
c5:2a:fd:2d:07:df:06:5f:e5:0b:eb:55:6e:5d:51:bc:7f:6e:
97:07:2f:b6:8f:ce:41:30:4b:e7:45:97:54:cd:c5:7a:80:79:
8a:93:01:e0:d8:6b:d2:cd:58:82:f8:c0:11:98:05:a7:f3:bf:
7b:bf:60:a7:d1:c7:20:a0:60:95:33:25:4e:d6:3b:0b:ff:81:
8d:1f:2b:b6:bd:96:39:f1:fe:51:bb:0a:3f:01:a2:47:9c:74:
45:47:24:eb:87:f8:d6:1b:e3:00:fc:10:4e:ed:db:da:b9:82:
e9:bc:eb:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:43 2024 by rpki-client on console-fra.rpki-client.org